$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa File: 3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa (raw, json) Hash identifier: /cwVaLiQFhcp+J5+DJrjhXsu+/uKD5neAYXqlmg6g0c= Subject key identifier: DE:7B:3E:5E:2A:8F:FD:7B:6B:48:0F:58:95:05:DC:4B:8A:2C:67:07 Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Certificate serial: 010D0C9F4328584EA7875073E20D54D3F97C0300 Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 23473 IP address blocks: 216.171.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:50:73:e2:0d:54:d3:f9:7c:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=6b2c5cdd-cb5a-44a4-a244-e585ac253f23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f8:4e:88:21:de:07:42:17:82:f9:bb:f2:60: d6:f0:8c:33:1e:b8:55:af:d9:e0:d9:18:49:8c:e3: 45:4c:89:1b:44:50:14:1e:99:85:6c:26:a7:79:e5: c8:fa:30:ae:c3:49:b1:db:cf:e8:1d:0b:86:b1:5c: 59:f6:65:c4:0d:09:e0:1c:b3:3d:97:2c:d6:1d:da: d3:cd:73:66:94:13:82:5c:c7:47:3b:43:1b:c7:33: 4b:07:28:27:30:fe:9d:5f:6a:51:8a:19:ff:f2:72: ad:09:f7:49:68:6f:38:6c:35:5d:63:5f:a3:0b:0c: c8:07:4d:4b:26:4b:56:7b:cf:f3:68:b0:b9:22:48: 4c:e4:38:84:12:be:e5:00:61:b5:19:ca:54:5d:14: f6:21:d5:f2:2a:5b:b2:d4:63:4a:b3:0c:ea:19:6a: fe:d8:78:31:0b:b3:ef:26:d8:1f:a2:35:a2:c2:0b: 3a:66:ad:1d:7f:a7:d1:55:b2:f4:2e:da:1c:f8:f2: ca:90:bd:c8:f2:1f:28:b4:2e:77:3a:b5:6a:f8:0f: 5c:09:c9:2b:31:d7:14:40:99:c1:45:40:1d:96:84: 1f:fb:4c:2b:6e:b3:45:44:f9:38:99:09:60:c6:22: 71:20:6a:d6:22:4f:02:be:17:81:0d:98:b7:c3:cb: 0a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:7B:3E:5E:2A:8F:FD:7B:6B:48:0F:58:95:05:DC:4B:8A:2C:67:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3e093774-b31a-3ab5-af2b-4c0b5d7d7cb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl X509v3 Authority Key Identifier: keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer sbgp-ipAddrBlock: critical IPv4: 216.171.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:e1:8d:59:9f:a9:6e:a5:59:d4:5d:71:92:f5:87:e4:fa:69: 6b:ed:75:44:96:62:a5:6a:ca:c7:a7:03:fa:4b:e1:dd:ad:75: ae:3e:59:fe:99:bd:d8:ce:ec:ec:e0:0f:17:d2:ab:ae:bd:03: 15:34:99:3a:89:ac:0f:d1:63:e0:96:f2:4b:5a:fd:be:09:b9: d8:da:e8:39:14:51:18:1a:46:6a:f1:65:8c:33:7d:78:94:74: 0a:03:97:b6:15:40:14:d3:b7:7c:e5:c0:48:75:17:e6:9d:24: 92:54:71:77:b4:4c:04:1d:b6:fa:2f:cd:04:ed:cc:a0:69:be: 94:8d:74:e2:6a:f9:62:53:60:96:2d:3e:ea:be:40:66:d4:40: f2:89:98:80:a7:bc:00:dc:6a:f3:67:93:e7:3b:fd:3b:ef:ed: a9:91:cf:cf:d5:c6:a8:12:4e:5e:66:0d:6b:ba:93:a8:dd:71: 2e:cb:62:9e:68:42:ca:f8:c8:7f:b8:31:81:db:f6:f3:44:77: 40:5f:79:d3:e3:c6:ea:9f:a2:c6:04:46:28:79:7e:45:19:43: 66:43:7a:f8:50:6e:63:1b:39:20:3b:79:46:fb:7d:0a:d8:46: 6d:66:e6:d2:59:b8:3d:32:81:fb:c5:07:57:ba:89:ef:1b:19: a1:ca:c9:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh1Bz4g1U0/l8AwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm ZTJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NmIyYzVjZGQtY2I1YS00NGE0LWEyNDQtZTU4NWFjMjUzZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPhOiCHeB0IXgvm78mDW8IwzHrhVr9ng2RhJ jONFTIkbRFAUHpmFbCaneeXI+jCuw0mx28/oHQuGsVxZ9mXEDQngHLM9lyzWHdrT zXNmlBOCXMdHO0MbxzNLBygnMP6dX2pRihn/8nKtCfdJaG84bDVdY1+jCwzIB01L JktWe8/zaLC5IkhM5DiEEr7lAGG1GcpUXRT2IdXyKluy1GNKswzqGWr+2HgxC7Pv JtgfojWiwgs6Zq0df6fRVbL0Ltoc+PLKkL3I8h8otC53OrVq+A9cCckrMdcUQJnB RUAdloQf+0wrbrNFRPk4mQlgxiJxIGrWIk8CvheBDZi3w8sKIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN57Pl4qj/17a0gPWJUF3EuKLGcHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5 MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvM2UwOTM3NzQtYjMxYS0z YWI1LWFmMmItNGMwYjVkN2Q3Y2IxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2 ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KseMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLhjVmfqW6lWdRdcZL1h+T6aWvtdUSWYqVqysenA/pL4d2tda4+Wf6Z vdjO7OzgDxfSq669AxU0mTqJrA/RY+CW8kta/b4Judja6DkUURgaRmrxZYwzfXiU dAoDl7YVQBTTt3zlwEh1F+adJJJUcXe0TAQdtvovzQTtzKBpvpSNdOJq+WJTYJYt Puq+QGbUQPKJmICnvADcavNnk+c7/Tvv7amRz8/VxqgSTl5mDWu6k6jdcS7LYp5o Qsr4yH+4MYHb9vNEd0BfedPjxuqfosYERih5fkUZQ2ZDevhQbmMbOSA7eUb7fQrY Rm1m5tJZuD0ygfvFB1e6ie8bGaHKybI= -----END CERTIFICATE-----Generated at Wed Jul 29 04:42:53 2026 by rpki-client